$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft File: r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json) Hash identifier: 0y1QYbe8rx+FsZRdGgbC2HiFumFe40rNc5HMcTQ9M18= Subject key identifier: F3:D8:43:FA:0A:0D:B2:3C:F6:1D:8D:73:C4:57:44:00:E4:45:20:96 Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft Manifest number: 02FD Signing time: Sun 27 Apr 2025 00:54:54 +0000 Manifest this update: Sun 27 Apr 2025 00:54:54 +0000 Manifest next update: Sun 04 May 2025 00:54:54 +0000 Files and hashes: 1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: ksVaxys6jh3+3AhnxsKO1pLAsqXekCCc7QCNRxSwj44=) 2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: n3tV3xCdGKrXtayf300FEN17BZ98v1+YuTGqNoc8EF8=) 3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: x1s3eQy6LeBQljvpss9e0xqe6y4ivgOueGGP5hZZQd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Validity Not Before: Apr 27 00:54:54 2025 GMT Not After : May 4 00:54:54 2025 GMT Subject: CN=680d805e-94b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:a3:d9:a2:07:1a:82:3b:8a:0b:7a:3e:ba: 34:a4:4e:38:23:6b:9b:f7:fc:f2:d0:ed:9d:04:47: 47:63:61:26:be:50:76:85:be:84:d6:32:d8:3b:09: c4:f9:47:76:67:ed:ed:99:38:b9:22:ba:9a:93:3b: 37:eb:19:8e:af:34:73:25:33:d5:4b:0e:28:47:f3: 95:22:51:f8:63:c6:09:c9:50:16:87:44:9c:3c:fd: 0c:98:e8:37:1c:ff:9d:3b:89:66:c5:25:ec:30:3d: de:4f:73:da:21:22:51:48:71:45:53:d3:1d:5e:75: e9:91:34:5b:16:cd:d7:66:cb:88:b7:60:af:6c:6a: ee:19:c1:de:46:13:c2:e2:fa:b6:3e:62:46:cd:c1: 7d:60:0c:4a:3e:a1:07:80:80:68:dd:77:c4:1d:9f: e1:af:11:fe:4e:4d:25:ce:5c:30:2e:89:01:ff:d1: 67:8a:18:de:fd:01:02:54:45:b8:59:36:e7:8c:f5: e0:59:dd:ea:c1:24:49:09:17:cc:33:29:c4:35:56: 56:cf:de:79:de:4d:f6:0a:55:a5:9f:52:15:2f:0c: 4e:03:c8:8d:7b:5f:71:37:96:a8:12:7e:cb:c5:29: c1:10:45:43:6f:2d:9e:58:ea:cc:3a:4a:ba:8e:d4: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:43:FA:0A:0D:B2:3C:F6:1D:8D:73:C4:57:44:00:E4:45:20:96 X509v3 Authority Key Identifier: keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c1:39:dd:0a:6a:d1:cb:86:d3:50:2c:f9:e2:f1:91:ac:9b: 7c:6c:64:dd:1a:4b:8e:4e:bd:f7:12:13:93:92:c5:dd:91:91: a7:ba:59:b1:df:22:70:f1:a6:9f:ad:68:5b:fa:b5:c1:7c:79: d1:2f:fd:4b:d1:fc:9a:b3:74:da:ea:72:65:32:ab:85:98:95: 57:64:b1:f5:69:df:11:7d:7c:78:9c:59:14:ec:3c:a8:89:c2: 24:fa:ae:07:1c:73:61:82:05:37:46:fe:32:a8:77:44:c2:d7: c5:a6:9d:a3:08:bd:8c:02:45:34:d1:88:d8:c0:59:a0:33:ab: f5:bd:31:dc:59:5e:59:c7:36:07:63:22:55:40:84:67:6f:67: c8:ae:68:7a:20:c5:e3:b3:08:82:d2:65:e0:8f:06:32:f1:ef: fb:84:1f:01:56:ae:6a:5c:34:54:3c:38:2b:38:3f:b2:0a:81: a8:c0:a7:86:03:51:88:de:93:32:05:a9:56:89:37:a4:46:d5: 5b:fc:55:f6:7b:18:9a:c0:f3:97:50:1c:90:0f:0a:42:35:e4: 86:70:5e:ff:60:2e:2b:8a:a2:e5:65:72:9f:bf:cd:58:32:f6: a6:69:a6:44:d2:f7:44:7f:98:71:5a:e2:3c:73:c8:de:03:0d: 17:e9:6c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3NTgxMTAvBgNVBAUTKEFGNTU1ODFCQTEyN0UyMDkwQTBBNTQ2MkZFN0JDRTcw NjE2RjJDREMwHhcNMjUwNDI3MDA1NDU0WhcNMjUwNTA0MDA1NDU0WjAYMRYwFAYD VQQDEw02ODBkODA1ZS05NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd6j2aIHGoI7igt6Pro0pE44I2ub9/zy0O2dBEdHY2EmvlB2hb6E1jLYOwnE +Ud2Z+3tmTi5Irqakzs36xmOrzRzJTPVSw4oR/OVIlH4Y8YJyVAWh0ScPP0MmOg3 HP+dO4lmxSXsMD3eT3PaISJRSHFFU9MdXnXpkTRbFs3XZsuIt2CvbGruGcHeRhPC 4vq2PmJGzcF9YAxKPqEHgIBo3XfEHZ/hrxH+Tk0lzlwwLokB/9Fnihje/QECVEW4 WTbnjPXgWd3qwSRJCRfMMynENVZWz9553k32ClWln1IVLwxOA8iNe19xN5aoEn7L xSnBEEVDby2eWOrMOkq6jtT9kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPYQ/oK DbI89h2Nc8RXRADkRSCWMB8GA1UdIwQYMBaAFK9VWBuhJ+IJCgpUYv57znBhbyzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc1OC80QzdBMjg2OEQz NkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRna0tDbFJpX252T2NHRnZM TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxVllHNkVuNGdrS0NsUmlfbnZPY0dGdkxOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc1OC80QzdBMjg2OEQzNkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRn a0tDbFJpX252T2NHRnZMTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOwTndCmrRy4bTUCz54vGRrJt8bGTdGkuOTr33EhOTksXdkZGnulmx 3yJw8aafrWhb+rXBfHnRL/1L0fyas3Ta6nJlMquFmJVXZLH1ad8RfXx4nFkU7Dyo icIk+q4HHHNhggU3Rv4yqHdEwtfFpp2jCL2MAkU00YjYwFmgM6v1vTHcWV5ZxzYH YyJVQIRnb2fIrmh6IMXjswiC0mXgjwYy8e/7hB8BVq5qXDRUPDgrOD+yCoGowKeG A1GI3pMyBalWiTekRtVb/FX2exiawPOXUByQDwpCNeSGcF7/YC4riqLlZXKfv81Y MvamaaZE0vdEf5hxWuI8c8jeAw0X6Wza -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client on console.sobornost.net